The Microsoft 70-640 Practice Exam is a very hard exam to successfully pass your exam.Here you will find Free Braindump2go Microsoft Practice Sample Exam Test Questions that will help you prepare in passing the 70-640 exam.Braindump2go Guarantees you 100% PASS exam 70-640

QUESTION 561Your company has two offices. The offices are located in Miami and London. The network contains an Active Directory forest named contoso.com. The forest contains two child domains named miami.contoso.com and london.contoso.com.The domain contains 50 domain controllers that run Windows Server 2008 R2. Each office is configured as an Active Directory site. You plan to deploy several read-only domain controllers (RODCs) to the Miami site. You need to pre-create the computer accounts of the RODCs.What should you do?

A. Run the dsadd.exe commandB. Run the nltest.exe command.C. Run the Set-AdDomain cmdlet.D. Run the dsmove.exe command.E. Run the dcpromo.exe command.F. Run the Move-AdDirectoryServer cmdlet.G. Use the Active Directory Schema snap-in.H. Use the Active Directory Users and Computers console.

A. Run the dsadd.exe commandB. Run the nltest.exe command.C. Run the Set-AdDomain cmdlet.D. Run the dsmove.exe command.E. Run the dcpromo.exe command.F. Run the Move-AdDirectoryServer cmdlet.G. Use the Active Directory Schema snap-in.H. Use the Active Directory Users and Computers console.

Answer: H

QUESTION 563Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. The domain contains two domain controllers named DC1 and DC2 that run Windows Server 2008 R2. DC1 is configured as the infrastructure master for contoso.com.You need to move the infrastructure master role from DC1 to DC2.What should you do?

A. Run the dsadd.exe commandB. Run the nltest.exe commandC. Run the Set-AdDomain cmdlet.D. Run the dsmove.exe command.E. Run the dcpromo.exe command.F. Run the Move-AdDirectoryServer cmdlet.G. Use the Active Directory Schema snap-in.H. Use the Active Directory Users and Computers console.

Answer: H

QUESTION 564Your network contains an Active Directory forest named contoso.com. The forest contains two domains. All domain controllers are configured as global catalog servers.The forest root domain contains five domain controllers. The domain controllers are configured as shown in the following table.You plan to create a custom attribute in Active Directory that will replicate to all of the global catalog servers. You need to identify which domain controller must be online to perform the planned action.Which domain controller should you identify?

A. DC1B. DC2C. DC3D. DC4E. DC5

Answer: B

QUESTION 565Your network contains an Active Directory domain.The domain is configured as shown in the following table.Users in Branch2 sometimes authenticate to a domain controller in Main.You need to ensure that users in Branch2 only authenticate to the domain controllers in Branch1.What should you do?

A. On DC1 and DC2, set the AutoSiteCoverage value to 1.B. On DC1 and DC2, set the AutoSiteCoverage value to 0.C. On DC3, set the AutoSiteCoverage value to 0.D. On DC3, set the AutoSiteCoverage value to 1.

QUESTION 566Hotspot QuestionYour network contains an Active Directory domain that has the password policy shown in the following exhibit. (Click the Exhibit button.)To answer, complete each statement according to the information presented in the exhibit.Answer:

QUESTION 567You have Active Directory Certificate Services (AD CS) deployed.You have a Version 1 certificate template.You need to ensure that all of the computers in the domain automatically enroll for a certificate based on the certificate template.What should you do?

A. On the certificate template, assign the Read, Enroll, and Autoenroll permission to the Domain Users group.B. In a Group Policy object (GPO), configure the Automatic Certificate Request Settings.C. On the certificate template, assign the Read and Autoenroll permission to the Authenticated Users group.D. In a Group Policy object (GPO), configure the autoenrollment settings.

QUESTION 569Your network contains an Active Directory domain. The domain contains a group named Group1. The minimum password length for the domain is set to six characters. You need to ensure that the passwords for all users in Group1 are at least 10 characters long. All other users must be able to use passwords that are six characters long.You create an Active Directory Fine Grained Password Policy.What should you do next?

A. From the Default Domain Policy, modify the password policy.B. Run the Add-ADFineGrainedPasswordPolicySubject cmdlet.C. Run the Set-ADDomain cmdlet.D. From the Default Domain Controller Policy, modify the password policy.

Answer: B

QUESTION 570Your network contains an Active Directory forest named contoso.com. The forest contains three domains named contoso.com, childl.contoso.com, and child2.contoso.com. The childl.contoso.com domain contains five domain controllers. The domain controllers are configured as shown in the following table.You plan to decommission the child1.contoso.com domain.You need to identify which two FSMO roles can be moved from childl.contoso.com to child2.contoso.com.Which two FSMO roles should you identify? (Each correct answer presents part of the solution. Choose two.)

Answer: ABExplanation:Forestwide Operations Master Roles The schema master and domain naming master are forestwide roles, meaning that there is only one schema master and one domain naming master in the entire forest.Note:– Operations Master Roles The five operations master roles are assigned automatically when the first domain controller in a given domain is created. Two forest-level roles are assigned to the first domain controller created in a forest and three domain-level roles are assigned to the first domain controller created in a domain. . – The five FSMO roles [in Windows 2003] are: Schema master – Forest-wide and one per forest.Domain naming master – Forest-wide and one per forest. RID master – Domain-specific and one for each domain. PDC – PDC Emulator is domain-specific and one for each domain. Infrastructure master – Domain-specific and one for each domain.